(19) 



3 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



(12) 



(45) Date of publication and mention 
of the grant of the patent: 
04.11.1998 Bulletin 1998/45 

(21) Application number: 94923252.4 

(22) Date of filing: 27.06.1994 



(n) EP 0 706 743 B1 

EUROPEAN PATENT SPECIFICATION 

(51) Intel 6 H04Q 3/00 



(86) International application number: 
PCT/US94/07210 

(87) International publication number: 

WO 95/01063 (05.01 .1 995 Gazette 1995/02) 



(54) MEDIATION OF OPEN ADVANCED INTELLIGENT NETWORK INTERFACE FOR PUBLIC 
SWITCHED TELEPHONE NETWORK 

VERMITTLUNG EINER OFFENEN VERBESSERTEN INTELLIGENTEN 
NETZWERKSCHNITTSTELLE FUR OFFENTLICHES FERNSPRECHWAHLNETZ 

MEDIATION D UNE INTERFACE OUVERTE DE RESEAU INTELLIGENT EVOLUE DESTINEE A UN 
RESEAU TELEPHONIQUE PUBLIC COMMUTE 



(84) Dcoiprwi.cd Contracting States: 

AT BE CH DE DK ES FR GB GR IE IT LI LU MC NL 
RTSE 

(30) Prorry 2806.1993 US 83984 

(43) Onto of publication of application: 
1704 1996 Bulletin 1996/16 

(73) Pr^pricioc BELLSOUTH CORPORATION 
Atlanta. Georgia 30367-6000 (US) 

(72) invcmof WE1SSER, Frank, J., Jr. 
Atlanta. GA 30328 (US) 

(74) Reprc^onuirvc Deal try, Brian et a I 
Eric Potior Clarkaon, 

Park View House. 
S8 The Ropewalk 
Nottingham NG1 5DD (GB) 



CD 

CO 

CD 
O 

o 

Q- 
LU 



(56) References cited: 
EP A- 0 340 665 

• PROCEEDINGS OF THE NATIONAL 
COMMUNICATIONS FORUM, vol.45, September 
1991, CHICAGO US pages 220 - 222, XP267446 
CALAUTTI 'Issues and some solutions for 
internetwork CCS7 implementation' 

• IEEE GLOBAL TELECOMMUNI ACTIONS 
CONFERENCE & EXHIBITION - GLOBECOM '90, 
vol.1, 2 December 1990, SAN DIEGO US pages 
420 - 426, XP218765 REGNIER ET AL. Personal 
Communication Services - the new POTS' 

• AT & T TECHNICAL JOURNAL, vol.70, no.3/4, 
Summer 1991, SHORT HILLS US pages 72 - 84, 
XP271089 HALL ET AL. 'The AT&T Service 
Circuit Node: a new element for providing 
Intelligent Network services' 

• IEEE INTERNATIONAL CONFERENCE ON 
COMMUNICATIONS - ICC '90, vol.2, 15 April 
1990, GEORGIA US pages 589 - 593, XP146129 
EL-TOU Ml ET AL. 'Interconnecting SS7 signal ing 
networks' 



Note Within nine months from the publication of the mention of the grant of the European patent, any person may give 
notice to the European Patent Office of opposition to the European patent granted. Notice of opposition shall be filed in 
a written reasoned statement. It shall not be deemed to have been filed until the opposition fee has been paid. (Art. 
99(1) European Patent Convention). 



Prnted by Jouve. 75001 PARIS (FR) 



WSOOCID <EP 0706743B1 t > 



1 



EP 0 706 743 B1 



2 



Description 

Technical Field 

The present invention relates to the field of switched 
telephony and in particular is a method of mediating 
message content and network impact that will be al- 
lowed by providing access to the advanced intelligent 
network associated with modern telephone switching 
systems to a wide range of entities other than a tele- 
phone service provider. 

Background of the Invention 

In the slightly more than a century of having tele- 
phone service available in the United States, the public 
switched telephone system has constantly evolved and 
grown in complexity, size., and capabilities. From the 
days in which calls were routed by a human operator 
working a plug board to switch and complete calls, the 
capacity of the system in both volume of traffic and serv- 
ice options have expanded greatly. A telephone compa- 
ny central office or central office switch is a device to 
which multiple subscriber lines are connected, each of 
which is terminated by a telephonic device of a custom- 
er. For conventional residential telephone service, one 
or more telephone sets will be connected to the sub- 
scriber line. Additionally, the central office has multiple 
trunk circuits connecting it to other central offices. Other 
trunk circuits are provided to customers, such as trunks 
feeding a private branch exchange (PBX) switch in a 
business office. 

Some early developments of enhanced telephone 
service include the introduction in the early 1 960s of di- 
rect long distance dialing. Prior to that time, all long dis- 
tance toll calls had to be handled by one or more human 
operators who set up the call circuit and activated billing 
equipment. An important feature of the enabling tech- 
nology for direct long distance dialing is the capability 
of switches to collect, store, and forward data identifying 
the dialed digits, i.e., the called number. These were 
transmitted through the network, as the call was set up 
via a well known signaling scheme known as multifre- 
quency (MF) signaling. MF signaling is a species of in- 
band signaling in that the information signals (identifica- 
tion of the called number) was transmitted by signals 
within the voice frequency band, over the same trunk 
circuits that carried the voice signal once the call was 
completed. This technology allowed a much higher vol- 
ume of long distance traffic to be handled and helped to 
significantly improve telephone service and to meet the 
demand for more and more service in the United States 
during the 1 960s and 1 970s. The major drawback of in- 
band signaling techniques was that they occupied voice 
trunk capacity during call set up. Furthermore, if the call 
could not be completed for some reason, such as the 
called number across the country was busy, cross coun- 
try trunk capacity was occupied while the call set up mi- 



grated its way through the j^etwork and the report of the 
busy was returned back over the voice lines to the call- 
ing party. Five to ten seconds, for thousands and thou- 
sands of busy calls per day, translates to significant us- 

5 age of trunk capacity. 

In the late 1970s and early 1980s, American Tele- 
phone & Telegraph Company (AT&T) developed early 
species of common channel interoffice signaling 
(CCIS). CCIS is essentially a network architecture for a 

io switched telephone network in which information about 
a telephone call is transmitted over high speed data links 
that are separate from the voice circuits that are used 
to transmit the signals of the call itself. Early in the de- 
velopment of common channel interoffice signaling, it 

is was recognized that the interoffice data signaling links 
could be designed to provide high speed digital data that 
could first determine whether a call could be completed 
prior to assigning trunk capacity to set up the voice link. 
Thus, with common channel interoffice signaling, if a 

20 caller in Atlanta is dialing a number is Seattle, the iden- 
tity of the called number can be transmitted over the in- 
teroffice signaling data links from the originating central 
office in Atlanta to the terminating central office in Seat- 
tle. The terminating central office is the central office that 

25 services the called number. If the called number is busy, 
data providing this information is transmitted back over 
the interoffice signaling link to the originating central of- 
fice in Atlanta that locally provides a audible busy signal 
to the caller. Therefore, no long distance trunk capacity 

30 is occupied during this process and the voice circuits 
between Atlanta and Seattle that formerly would have 
been used to attempt to complete the call remain free 
for other uses. If the called number in Seattle is not busy, 
various devices in the network respond to the informa- 

35 tion about this call to assign interoffice trunks to set up 
a connection for the call, and it is then completed. 

The public switched telephone network has evolved 
in the 1980s to a complex and very versatile system, 
most of which supports and is controlled by a form of 

40 common channel interoffice signaling. The basics of this 
network were designed by AT&T. Development of the 
network by the Regional Bell Operating Companies 
(RBOC) as well as other independent local telephone 
service providers has continued since the judicially 

45 mandated divestiture of local exchange carriers by 
AT&T in 1 984. The basic architecture of the switched 
telephone network is, in significant parts, identical 
throughout the United States and the developed indus- 
trialized world including western Europe and Japan. The 

50 specifics of the current network described in this speci- 
fication are those employed by the RBOCs and other 
local exchange carriers operating in the United States. 
This network architecture is used by all modern tele- 
phone switching systems in the United States and is vir- 

55 tually identical to modern systems in western Europe 
and Japan. It is commonly referred to as the Advanced 
Intelligent Network (AIN). The need for the present in- 
vention results from an event that many people familiar 
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with the telephone business in the United States believe 
will be forthcoming in the near future: provision of ac- 
cess to the Advanced Intelligent Networks operated by 
local exchange carriers to third parties so that they may 
provide competitive telephone related services to local $ 
exchange carrier subscribers. In other words, it is be- 
lieved likely that either voluntarily or by regulatory man- 
date, the local exchange carriers (LECs) (i.e., the local 
telephone service providers) will be required to allow 
others to access the Advanced Intelligent Network that 
controls many modern features and services offered by 
telephone companies, including the setting up and tak- 
ing down of voice connections. 

In the modern intelligent public switched telephone 
network, the same signaling path described above that 
is used for basic call set up, take down and routing, is 
also used to provide enhanced custom calling features 
and to control the operation of billing equipment and 
maintain billing records. Thus : it will be appreciated that 
allowing access to this network to parties other than the 
local exchange carrier is a proposition that is fraught 
with peril. The careless or malicious party with access 
to the digital network that controls the telephone system 
and access to information stored therein can seriously 
hamper proper operation of the public switched tele- 
phone network, corrupt data stored therein, including 
billing data : or surreptitiously obtain private information 
stored within the network unless adequate precautions 
are taken if and when access to third parties is provided. 
Therefore, the present invention has been developed in 
anticipation of open access to the intelligent network of 
the public switched telephone system. 

In order to understand both the need for the present 
invention and its implementation, it is first necessary to 
understand the fundamental architecture of the modern 
Advanced Intelligent Network and the points at which 
an interface may be provided to third parties. Figure 1 
of this specification is a block diagram representing at 
least part of the AIN of a typical local exchange carrier. 
While the diagram is simple, the components thereon 
are well known to those skilled in the art. A plurality of 
central office switches is provided in a typical public 
switched telephone network. These are indicated as 
SSP switches 15-15' in Figure 1. The dashed line be- 
tween these indicate that the number is arbitrary. Also, 
non-SSP switches, such as switch 16 are also included 
within the network. SSP is an acronym for Service 
Switching Point. 

The difference between an SSP central office 
switch and a non-SSP central office swrtch is that the 
former includes intelligent network functionality. This is 
an indication that the switch is equipped with appropri- 
ate hardware and software so that, when a set of pre- 
determined conditions are detected, the switch will ini- 
tiate a trigger for a predetermined state of a call on a 
subscriber line, generate the trigger as an appropriate 
message to be sent out over the AIN, suspend handling 
of a call until it receives a reply from the network instruct- 
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ing it to take certain action-.-Jn the alternative, the switch 
will have a default task to execute if a timeout occurs 
and no response is provided by the network to the query 
made by the switch. In summary, the SSP switches are 
those that are fully equipped to deal with and take ad- 
vantage ol the Advanced Intelligent Network described 
herein. 

Non-SSP switch 16 is an electronic switch that can 
generate certain rudimentary packets and provide them 
over the network, but which must rely on other equip- 
ment, described in greater detail hereinbelow, to provide 
subscriber lines connected to such a switch with more 
complex features and services available in the intelli- 
gent network. Central offices 15-15' and 16 each have 
a plurality of subscriber lines commonly designated as 
17-17', connected thereto. Typically, the number of sub- 
scriber lines will be on the order of 10,000 to 70,000 
lines. Each of subscriber lines 17-17* is connected to a 
terminating piece of customer premises equipment, that 
is represented by a like plurality of telephone sets 18-18' 
for each of. the switches. 

Interconnecting central office switches 15 and 16 
are a plurality of trunk circuits indicated as 1 9a and 1 9b 
in Figure 1 . These are the voice path trunks that inter- 
connect the central office and over which calls are con- 
nected when completed. It should be understood that 
central office trunking in a typical urban environment is 
not limited to a daisy chain arrangement implied by Fig- 
ure 1 . In other words, in a typical network, trunk circuits 
will exist between central office switch 15' and central 
office swrtch 16. Therefore, when a local call is made 
between two central offices, if a direct trunk connection 
exists between the offices, and is not busy, the network 
will assign that trunk to the completion of that particular 
call. If there is no direct trunking between the two central 
offices, or the direct trunks are ail in use, the call will be 
routed along trunks from the originating central office to 
at least one other central office, and through subsequent 
trunk connections on to the terminating central office. 

This general architecture is magnified when a wider 
geographic area that includes multiple local exchange 
carriers is considered. In that case, the only significant 
difference is that certain inter exchange carrier switches 
that swrtch nothing but long distance trunk circuits are 
included. 

Most of the intelligence of the intelligent switched 
telephone network resides in the remaining components 
shown on Figure 1. These are the computers and 
switches that embody the current version of the com- 
mon channel interoffice signaling scheme mentioned 
above. Each of switches 15 through 16 is connected to 
a local signal transfer point (STP) 20 via respective data 
links 21a, 21b, and 21c. Currently, these data links are 
56 kilobit per second bidirectional data links employing 
a signaling protocol referred to as Signaling System 7 
(SS7). The SS7 protocol is well known to those skilled 
in the art and is described in a specification promulgated 
by the American National Standards Institute (ANSI). 
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The SS7 protocol is a layered protocol wherein each lay- 
er provides services for layers above it and relies on the 
layers below to provide it with services. The protocol em- 
ploys packets that include the usual beginning and ter- 
minating flags and a check bit. Additionally, a signal in- 5 
formation field is provided that includes a variable length 
user specific data and a routing label. A service infor- 
mation octet is provided that identifies a priority of the 
message, the national network of the destination of the 
message, and the user name identifying the entity that 
created the message. Also, certain control and se- 
quence numbers are included within the packet, the us- 
es and designations of which are known to those skilled 
in the art and described in the above referenced ANSI 
specification 

All ot the SS7 data packets from the switches go to 
a signal transfer point (STP) 20. Those skilled in the art 
will recognize that signal transfer point 20 is simply a 
multi-port high speed packet switch that is programmed 
to respond to the routing information in the appropriate 
Inyei of the SS7 protocol, and route the packet to its 
in:endcd destmaton The signal transfer point is not nor- 
mally per se the destination of a packet, but merely di- 
rects traffic among the other entities on the network that 
pen crate and respond to the data packets. It should be 
noiod that ognal transfer point devices such as STP 20 
nrc c onv en :»onaliy installed in redundant pairs within the 
network so tnnt rt one device fails, its mate takes over 
unrii tnr» Ut m STP t«, able to return to service. In practice, 
thr>ro it** rociarxtin! data links between each of central 
of ice switches IS through 16 for enhanced reliability. 
F o' the s^ikc o* simplicity ot the drawings, the redundant 
ocv*ces have not been illustrated in the drawing figures 
rn tnts specification 

Also connect s :o signal transfer point 20 over SS7 
data imk ?5 ts * i AE SS network access point (NAP) 22. 
Nct*c*k rtccess point 22 is a computing device pro- 
Qf,*mmod to detect trigger conditions It requires the 
support ot an SSP switch to notify AIN network systems 
ot these trKjcjer detection events. An SSP can support 
mutt ok? NAP switches Logically, this SSP is designated 
at tn ? dost na'»or aodrcss for many of the packets gen- 
erated by the network that would otherwise be routed to 
tnc 1 AtSS NAP t it were an SSP equipped switch. 

Much ot the ntciiigence and the basis for many of 
tnc new enhanced features ot the network reside in the 
local service control point (SCP) 26 that is connected to 
biunrtl transfer pom 20 via SS7 data link 27. As is known 
tu 0 iui>o skilled in the ar t service control points are phys- 
ically implemented by relatively powerful fault tolerant 
computers Typical implementation devices include the 
Star Server FT Model 3200 or the Star Server FT Model 
3300 both sold by American Telephone & Telegraph 
Company The architectures of these computers are 
based on Tandem Integrity S2 and Integrity S1 plat- 
forms, respectively In most implementations of a public 
switched telephone network, service control points are 
also provided in redundant mated pairs in order to as- 



sure reliability and continued operation. of the network. 

The computing devices implementing service con- 
trol points typically accommodate one to twenty seven 
disk drives ranging from 300 megabytes to 1.2 giga- 
bytes per drive, and have main memory on the order of 
24 to 192 megabytes. Thus, it will be appreciated that 
these are large and powerful computing machines. 
Among the functions performed by the service control 
points are maintenance of network data bases used in 
providing enhanced services. The computers embody- 
ing the SCPs can execute at a speed on the order of 17 
million instructions per second. Using the SS7 protocol, 
this translates to about 50 to 100 transactions (query/ 
response pairs) of network messages per second. 

Service control point computers were initially intro- 
duced into the network to handle the necessary trans- 
lations and billing transactions for the implementation of 
800 number service, i.e., toll free (to the caller) long dis- 
tance service. An 800 number subscriber has at least 
one dial-up line number that is to be called when a call 
to that subscriber's 800 number is placed. There is no 
physical central office or area of the country that corre- 
sponds to the 800 area code. It is significantly more eco- 
nomical to provide a few central locations at which the 
lookup of the directory number for an 800 call can be 
made than to provide the translation information redun- 
dantly at many central office switches. Currently, service 
control points also include data bases for credit card call 
transactions. 

Also, service control points include data bases that 
identify particular service customers. In order to keep 
the processing of data and calls as simple and generic 
as possible at switches, such as switches 15-15*, a rel- 
atively small set of triggers are defined at the switches 
for each call. A trigger in the network is an event asso- 
ciated with a particular subscriber line that generates a 
packet to be sent to a service control point. The trigger 
causes the service control point to query its data base 
to determine whether some customized calling feature 
or enhanced service should be implemented for this par- 
ticular call, or whether conventional plain dial-up tele- 
phone service should be provide for the call. The results 
of the data base inquiry are sent back to the switch from 
SCP 26 through STP 20. The return packet includes in- 
structions to the switch as to how to process the call. 
The instruction may be to take some special action as 
a result of a customized calling service or enhanced fea- 
ture, or may simply be an indication that there is no entry 
in its data base that indicates that anything other than 
plain telephone service should be provided for the par- 
ticular call. In response to receiving the latter type mes- 
sage, the switch will move through its call states, collect 
the called digits, and generate further packets that will 
be used to set up and route the call, as described here- 
inabove. 

Similar devices for routing calls among various local 
exchange carriers are provided by regional signal trans- 
fer point 28 and regional service control point 29. The 
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regional STP 28 is connected to local STP 20 via an 
SS7 data link 30. The regional STP 28 is connected to 
the regional SCP 29 via a data link 31 that is physically 
and functionally the same as data link 27 between the 
corresponding local devices. As is.the case with the lo- 
cal devices, regional STPs and 3-TCs are provided in 
mated redundant pairs for the purposes of reliability. 

Both local and regional service control points 26 
and 29 are connected via respective data links 35 and 
36 to a service management system (SMS) 37. The 
service management system is also implemented by a 
large general purpose digital computer and interfaces 
to business offices of the local exchange carrier and in- 
terexchange carriers. The service management system 
downloads information to the data bases of the service 
control points 26 and 29 when subscribers modify their 
ensemble of AIN services. Similarly, the service man- 
agement system downloads, on a non-realtime basis, 
billing information that is needed in order to appropriate- 
ly invoice telephone company subscribers for the serv- 
ices provided. 

The modem Advanced Intelligent Network also in- 
cludes service nodes (SNs) such as service node 39 
shown in Figure 1 . Those skilled in the art will be familiar 
with service nodes, which are physically implemented 
by the same types of computers that embody the service 
control points 26 and 29. In addition to the computing 
capability and data base maintenance features, service 
node 39 also includes voice and DTMF signal recogni- 
tion devices and voice synthesis devices. Service node 
39 is connected to service management system 37 via 
a data link 40 that services the service node in essen- 
tially the same way it services SCPs 26 and 29. While 
service node 39 is physically quite similar to SCP 26, 
there are some important differences in the uses to 
which it is put. Service control points such as SCP 26 
normally implement high volume routing services, such 
as call forwarding and 800 number translation and rout- 
ing. They are also used for maintenance of and provid- 
ing access to high volume data bases for authorization 
of billing, such as credit card number validations. In most 
local exchange carrier networks, service control points 
are only used for data base look up and routing services 
that take place prior to the logical completion of the call, 
i.e., the provision of a ringing signal to the called sub- 
scriber line and ring back to the calling subscriber 

By contrast, service nodes, such as service node 
39, are used principally when some enhanced feature 
or service is needed that requires an audio connection 
to the call or transfer of a significant amount of data to 
a subscriber over a switched connection during or fol- 
lowing a call. As shown in Figure 1 , service node 39 is 
typically connected to one or more (but normally only a 
few) switches via Integrated Service Digital Network (IS- 
DN) links shown as 41 . Thus, services that are imple- 
mented during a call (i.e., after completion of ringing or 
called subscriber pick up) usually employ the facility of 
a service node such as service node 39. 



To give the reader an- example, voice announce- 
ment of a calling party is a custom feature that is imple- 
mented via service node 39. Assume a subscriber dials 
the number of another subscriber, Ms. Jones, who sub- 

5 scribes to a service to provide voice announcement of 
incoming calls. One of the call progress states for an 
SSP equipped switch occurs after collection of the di- 
aled digits when a termination request trigger is gener- 
ated by the switch. This trigger consists of an SS7 data 

10 packet that is routed through STP 20 to SCP 26 and 
identifies the particular called party number. The SCP 
looks up the record for the directory number associated 
with Ms. Jones' phone line and detects that she is a sub- 
scriber to a service that provides voice announcements 

is identifying incoming calls. SCP 26 then sends packets 
back over data link 27 to STP 20 that are routed to both 
the central office associated with the calling party's sub- 
scriber line and that of Ms. Jones. 

The central office of the calling party is instructed to 

20 wait or place ring back on the calling party's subscriber 
line. Another packet is routed to switch 15*. It includes 
the identity of Ms. Jones' directory number, the calling 
party number, and a request for access to a voice syn- 
thesizer channel in service node 37. Switch 1 5' estab- 

2S Hshes a voice and data circuit over ISDN links 41 with 
the service node and passes a packet (in an appropriate 
ISDN format) to the service node. The service node then 
queries its data base to determine if there is an entry in 
Ms. Jones* record (actually the record for her directory 

30 number) for the particular calling number. 

In the meantime, the necessary voice trunks have 
been connected between central office 1 5' and the cen- 
tral office serving Ms. Jones' telephone line and thus, a 
voice path exists between the synthesizer in service 

35 node 39 and Ms. Jones when answer supervision is re- 
turned on her subscriber line. The synthesizer will then 
announce the identity of the calling party and the person 
answering Ms. Jones' telephone can take appropriate 
action (such as pressing a particular number on the 

40 phone) to indicate whether or not they want to receive 
the call. The DTMF number is recognized by a DTMF 
recognition circuit in the service node that is likewise 
bridged onto the voice circuit. The service node then 
generates appropriate packets indicating whether the 

45 call has been accepted or rejected that travel over the 
ISDN link 41 to switch 1 5'. In the switch, protocol trans- 
lation takes place so that the information in these pack- 
ets is formatted into proper SS7 protocol packets that 
are then passed on to signal transfer point 20 and routed 

so to appropriate offices to either set up the voice link be- 
tween the calling party and Ms. Jones' subscriber line, 
or to provide appropriate audible indication (such as 
busy or reorder tone) to the calling party. 

The foregoing description is a basic overview, to- 
ss gether with a few examples, of the operation of the Ad- 
vanced Intelligent Network that is a modern public 
switched telephone system. As will be apparent to both 
those skilled in the art and the casual but interested 
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reader of this specification, the integrity of the data pack- 
ets passing through the network is crucial to its opera- 
tion. The integrity of the packets must be maintained in 
order for the system to function properly so that calls 
may be completed. Furthermore, since the SS7 data 
packets control the allocation of voice circuit capacity, it 
is critical to proper operation of the network that spurious 
or unneeded requests for trunk capacity not be gener- 
ated within the network. 

One result of the power and versatility of the modern 
intelligent switched telephone network is the possibility 
that inconsistent or problematic conflicting requests can 
be generated. One common example that needs to be 
avoided is known as a trigger loop. In its simplest form, 
consider the situation in which two subscribers of an Al N 
call forwarding custom calling feature each decided to 
go visit the other. In accordance with the rules of call 
forwarding, they pick up their phone and dial the appro- 
priate digits to indicate the telephone number associat- 
ed with their destination. This information is stored at 
service control point 26 for each subscriber. 

If someone calls one of these subscribers, a termi- 
nation request trigger for one of the telephone lines is 
generated. The SCP 26 looks in its data base and re- 
ports that this call should be forwarded to the other tel- 
ephone number under consideration. This generates a 
packet that allocates a trunk circuit between the two tel- 
ephones in order to complete the call to the forwarded 
destination After this happens, the network generates 
a termination request trigger for the number to which the 
first subscriber's call has been forwarded. This trigger 
is acted upon by the SCP by noting that calls to that 
phone have been forwarded to the other f riend's phone. 
In response to this, if nothing else is done, the network 
will allocate a second trunk circuit back from the second 
friend's phone to the first friend's phone, and likewise 
generate a termination request trigger identical to the 
original one. The process would continuously repeat it- 
self. 

If left unchecked, such a trigger loop would, very 
quickly (in view of the speed of the computers involved) 
allocate all of the existing trunk capacity available be- 
tween these two friend's subscriber lines to a call that 
will never be completed. This would shut out all of the 
calls between these offices and furthermore occupy 
much alternate routing trunk capacity. Since these types 
of services are currently only under the control of the 
local exchange carriers, they will program their service 
control points to recognize a condition of a trigger loop 
and to terminate its operation in a graceful way so that 
trunk capacity is not tied up in a wasteful manner. Other 
solutions are possible for this specific problem, but there 
are many related scenarios, such as intra-switch trigger 
loops, or other more complex cases, which must be con- 
sidered. 

It should be quickly appreciated that the ability to 
quickly detect this type of trigger loop resides in the fact 
that the service control point computing device has ac- 



cess to all information about call forwarding orders in its 
data base, or in a data base that it can access over the 
network. The prospect of allowing private third party en- 
tities access to the SS7 signaling network that can re- 
5 route calls in a manner so that its destination is not re- 
flected in the data bases maintained by the local ex- 
change carrier leads to the possibility of undetected trig- 
ger loops when third parties are allowed to generate net- 
work orders for routing calls to subscriber lines other 
than the line associated with the directory number dialed 
at the call's origination. Furthermore, the ability to re- 
route calls via third party access to the network on its 
face leads to the possibility that the mischievous or un- 
scrupulous operator could generate routing orders that 
would misdirect calls intended for one business to those 
of a competitive business. 

The inventor of the present invention believes that 
opening the network SS7 data links to third parties so 
that they may provide customized services over the tel- 
ephone network will be regulated so that the third party 
providers will not be required to provide extensive infor- 
mation to the local exchange carrier about the nature of 
the service provided. Thus, the prospect of opening the 
network to third party suppliers of enhanced calling serv- 
ices is one that requires careful mediation at the inter- 
face between the local exchange carrier network and 
the third party, and monitoring of activity and data packet 
messages to protect both the integrity and operation of 
the network and the privacy of ail service providers' sub- 
scribers. 

Furthermore, it is believed that there will be no pro- 
hibition against individual telephone subscribers order- 
ing different forms of enhanced services from separate 
third party vendors. Under these circumstances, the lo- 
cal exchange carrier might have no information about 
various services, and even the third party suppliers 
might not know that a particular subscriber is a customer 
of another entity for another service. Under these cir- 
cumstances, the order in which triggers are passed 
across an interface to a third party provider of services 
can affect the net result of the services to the subscriber. 
For example, if a particular subscriber was a call for- 
warding customer of one service and a call screening 
customer of another service, the order in which the trig- 
gers were reported to the respective providers of these 
services will affect whether all of the subscriber's calls 
are screened. A call screening service is one that will 
block incoming calls originated from certain subscriber 
lines. It is a service that provides the possibility of rees- 
tablishing some of the privacy that the ubiquitous use of 
telephones has eroded in the modem world. 

If the termination request trigger for the particular 
called subscriber is first provided to the entity providing 
the screening service, then all calls to the subscriber will 
be properly screened. If, however, the trigger is first pro- 
vided to the entity providing the forwarded service, and 
the subscriber has indeed forwarded his or her calls, the 
next termination request trigger that is generated will be 
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for the number to which the line has been forwarded. 
This will not be detected as a trigger that requires serv- 
ice by the entity providing the screening process and 
thus, forwarded calls will not be screened. It is therefore 
believed by the inventor that a hierarchy or sequence of s 
provision of triggers for various services may need to be 
specified by subscribers in addition to the technical con- 
straints that require avoidance of undesirable feature in- 
teractions. 

It is anticipated that third party enhanced service 
providers who are given access to the intelligent net- 
work will be billed for use of the network capacity based 
on the number of query/response pairs they generate 
within the network. This is believed by the inventor to be 
the most likely scenario for a tariff for this service since 
it is relatively easy to maintain a count that is a measure 
of the use of local exchange carrier equipment that is 
made by the outside service provider. So long as the 
Advanced Intelligent Network remains closed, local ex- 
change carrier designers could predict network traffic 
and thus, make plans for expansion of the capacity of 
the network with a relatively high degree of confidence. 
The opening of the network to third party providers will 
require some estimation from the third party service pro- 
viders as to the number of query /response pairs (i.e., 
packets or network messages) that provision of their 
service will produce so the local exchange carriers can 
estimate the impact of the outside service on the net- 
work 

The impact can be manifested in two basic ways. 
The first is a consideration of total packet traffic gener- 
ated by the outside service provider over a relatively 
long period of time, such as a day. The second aspect 
that must be considered is the time rate of generation 
of packets by the third party service provider. Outside 
service providers may provide services that have a rel- 
atively low average number of messages per unit time 
over each day, but may generate a very high volume of 
traffic in a small window of time. Numerous occurrences 
of high density traffic bursts from several non-local ex- 
change carrier (non-LEC) entities can impede the work- 
ing of the rest of the telephone network, including the 
slowing down of the delivery of dial tone, or the occupa- 
tion of an undue amount of trunk capacity. With LEC pro- 
vided services, the local exchange carrier can custom- 
ize responses to high message content services, such 
as provision of radio contest call-in lines. However, it is 
anticipated that local exchange carriers will have very 
little information about the nature of the services provid- 
ed by third parties if the network is opened and thus, 
there is a need for mediating traffic and protecting the 
network in real time at the interface provided to the third 
party supplier There is a need for the network to be able 
to respond by disabling a problem source that is gener- 
ating message traffic at too high a density, or is failing 
to respond appropriately totriggers and other messages 
routed to it and therefore, causing a large number of de- 
vices, particularly at SSP switches, to wait for a timeout 



before proceeding with ca& handling. . 

Also, much of the information maintained in data 
bases within the network can constitute sensitive busi- 
ness information of the customers of the local exchange 
carriers. Information on the rate at which a business re- 
ceives telephone calls, the 800 number traffic it experi- 
ences, or even the temporal characteristics of calls to 
particular businesses can constitute information that 
might be useful to a business competitor of an LEC cus- 
tomer. Therefore, if the network is opened, there is a 
need to carefully check and restrict the type of informa- 
tion to which non-LEC customers are given access. 

The current use of separate SS7 signal packets to 
control call routing was, in significant part, motivated by 
a need to reroute calls in order to provide custom calling 
services or enhanced services. The simplest example 
is, of course, the forwarding of a call intended for one 
subscriber line to another one. However, the ability to 
reroute calls to a subscriber line other than that associ- 
ated with the number dialed also leads to a potential for 
business mischief if and when the network is opened to 
third party generators of data packets. 

For example, if not controlled, a competitor of one 
business that uses inbound phone calls as a significant 
source of new customers could generate a packet on 
the network that instructed a service control point com- 
puter to forward a call from a competitor to the phone of 
the business entity that generated the network mes- 
sage. This could be done periodically, leaving the for- 
warding order in place for only short periods of time, so 
that a certain percentage of incoming calls were bled off 
in this fashion. Thus, in the event the network is opened 
to third parties, there is a need to protect the integrity of 
the call routing process from unauthorized or improper 
attempts to reroute calls or interfere with calls that the 
third party entity having access to the network should 
not affect. 

An article describing relatively new service circuit 
nodes (referred to as service nodes in this specification) 
and the basic architecture of the Advanced Intelligent 
Network appeared under the title "The AT&T Service 
Circuit Node: A New Element for Providing Intelligent 
Network Services" in volume 70 (1991) no. 3/4, of the 
AT&T Technical Journal The article describes the serv- 
ice node that complimented existing network switching 
and database elements by providing internal network 
access to a programmable node that has highly special- 
ized service circuits including a digital switch fabric unit, 
voice synthesis and recognition circuitry, and tone rec- 
ognition circuitry. The service node can respond to par- 
ticular triggers in the network to implement customized 
services. Additionally, U.S. Patent 4,611,094 shows an 
early system using the common channel interoffice sig- 
naling (CCIS) system in which a customer could pro- 
gram certain primitive functions relating to handling of 
inbound calls to the customer. 

In summary, the Advanced Intelligent Network is a 
complex high speed, high traffic volume packet 
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switched messaging arrangement that provides a great 
deal of versatility in the handling of telephone calls. Most 
network elements, and in particular the SSP switches, 
are designed so that a relatively simple format of a query 
message is generated upon certain events and the 
switch will wait for a response from the network before 
proceeding with call processing. These procedures em- 
ploy a watchdog timer that will timeout in the event a 
response to the query is not received. However, in cir- 
cumstances where further call progress was controlled 
by the occurrence of timeouts, as opposed to a valid re- 
sponse, for a large percentage of the calls being proc- 
essed, there would be a significant deterioration in the 
performance of the network. It would cause customers 
to experience undue delays in call processing or the in- 
ability to have enhanced features properly provided. 
Fundamentally, it is the versatility of the network that 
leads to its vulnerability to inappropriate network mes- 
sages. Therefore, if and when the network is opened so 
that access to the Advanced Intelligent Network is avail- 
able to third party enhanced service providers, there is 
a need to provide mediation of message traffic across 
the interface between the local exchange carrier and the 
third party service provider, and to protect the network 
from mischief, human error, and equipment failure on 
the third party service provider's side of the interface. 

Summary of the Invention 

The present invention is a method of mediating 
messages passed in packets across an interface into 
the Advanced Intelligent Network. While the focus and 
the motivation of the present invention has been the pro- 
spective opening of the Advanced Intelligent Network to 
parties other than local exchange carriers, the method 
of the present invention is applicable to any source of 
AIN messages that can affect call processing anywhere 
in the network. Because of some types of mediation that 
are required or desirable in the practice of the present 
invention, it may be advantageous to mediate message 
packets from all sources on the network, both those 
maintained by local exchange carriers and those pro- 
vided across an interface from third party service pro- 
viders. This is particularly true with respect to mediation 
of service interactions since there may be undesirable 
effects of the interaction of a service provided by a third 
party service provider with a service provided by a local 
exchange carrier. 

Stated in its broadest form the present invention is 
a method that examines the number and content of mes- 
sages traveling in at least one direction across a defined 
interface to an intelligent network that controls a 
switched telephone system. It includes the steps of ex- 
amining parameters of the message, directory numbers 
affected by the message, and a sender identifier indic- 
ative of the entity represented to have originated the 
message. These are compared with stored or predeter- 
mined quantities to determine if it is appropriate to pass 
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the message on to a recipient and to let the network act 
on the instructions within the message. 

Accordingly, the present invention is a method of 
mediating traffic in packet messages in an intelligent 
5 switch telephone network that includes a plurality of dig- 
ital data communications channels between a plurality 
of central offices and at least one signal transfer point, 
a service control point that is connected to the signal 
transfer point, including the steps of detecting a sender 

10 identifier in each in-bound packet from said interface, 
detecting an affected customer identifier in each of the 
inbound packets from the interface, detecting an affect- 
ed customer identifier in each of the inbound packets 
from the interface that includes a message to alter call 

is processing for an affected customer directory number, 
the method being characterized by the service control 
point being a mediated service control point that in- 
cludes at least one database containing customer 
records, providing an interface to a service provider con- 

20 trol point that is connected to the signal transfer point 
reading a particular one of the customer records in the 
database that contains data for a directory number cor- 
responding to the affected customer identifier and de- 
termining whether a sender corresponding to said send- 

2S er identifier is authorized to alter calls involving this par- 
ticular directory number, and rejecting the inbound pick- 
et if the sender is not authorized to alter calls involving 
the particular directory number. Additionally, the present 
invention employs the same methodology with a data- 

30 base in the service control point containing service pro- 
vider records indicative of allowable message rate for 
particular service providers connected to the Advanced 
Intelligent Network. The method determines the in- 
bound message rate at which packet messages are pro- 

35 vided across the interface from a service provider 
source of packet messages and further determines 
whether the inbound message rate exceeds the author- 
ized message rate number by at least a predetermined 
amount. If the inbound message rate exceeds the au- 

40 thorized message rate number by at least the predeter- 
mined amount, packet messages from the service pro- 
vider source of packet messages are blocked and the 
service control point subsequently sends messages ef- 
fecting a default application in response to network mes- 

45 sages addressed to the service provider source of pack- 
et messages. 

The mediated SCP determines whether the mes- 
sage is one that requests alteration of call processing 
for an affected customer directory number. If this is the 

so case, the affected customer identifier within the mes- 
sage is read and that customer's record is looked up in 
the data base at the mediated SCP Each customer 
record contains an indication of which service providers 
are authorized to alter calls involving that particular di- 
ss rectory number. In other words, the customer record 
contains an indication of the providers of enhanced or 
custom calling features for which the LEC customer as- 
sociated with this phone number is a subscriber If there 
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is no entry for the entity that corresponds to the sender 
identifier in the message, the message is rejected by the 
mediated SCP because it appears to be an attempt by 
the service provider to affect the call processing of a di- 
rectory number for a person who is not a customer of 
the service provider. 

The invention also detect a destination address for 
inbound packets and determine, from records main- 
tained in the data base at the mediated SCP, whether 
this particular service provider is allowed to send mes- 
sages to the destination address. An example might be 
a destination address of a record within an LEC billing 
data base. If the service provider on the other side of 
this particular interface is not authorized to alter such 
billing records, inbound messages across the interface 
that are directed to LEC billing records will be rejected. 

According to another aspect of the present inven- 
tion, the mediated SCP maintains service provider 
records in a data base, which records include a mes- 
sage rate number that is an indication of the authorized 
rate of message traffic for each service provider across 
a particular interface. This information is required in or- 
der to allow the operator of the Advanced Intelligent Net- 
work to make sure that some service providers do not 
over load the network with message traffic so as to im- 
pede its overall operation, or to slow the ability of other 
service providers to respond to requests for services 
from their customers. An inbound message rate is de- 
termined for each service provider In its preferred form, 
the inbound message rate is the number of messages 
per unit time over a relatively short window of recent his- 
tory. In other words, this number will increase in re- 
sponse to a burst of a large number of messages over 
a short period of time. 

It is preferable to determine the inbound message 
rate as close as possible to the physical interface, it pref- 
erably being done by simply detecting the number of 
packets that pass across a particular physical port at the 
interface. However, this task needs to be performed at 
a physical element that has the necessary calculating 
and data storage capacity. In one preferred form of the 
present invention, this is accomplished by detecting the 
number of packets inbound from a particular service 
provider to a service control point. In an alternate form, 
this is accomplished by detecting the number of mes- 
sages that pass on an inbound ISDN port from a service 
node. It can be accomplished at other points in the net- 
work. 

If the inbound message rate exceeds the authorized 
message rate number by at least a predetermined 
amount, the AIN will establish a condition of blocking 
further inbound messages from the service provider. 
The blocking may be temporary, or may require affirm- 
ative action on the part of the service provider to allevi- 
ate the message rate problem before the block will be 
removed by the AIN. 

Since the blocking of messages from a service pro- 
vider will disrupt the provision of enhanced services, or 
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may even disrupt the provision of any telephone service, 
for customers of the service provider whose messages 
are blocked preferred forms of the present invention ef- 
fect a default application to substitute for the applica- 
5 tions implemented by the service provider that has been 
cut off from the AIN. Even if service switching point has 
a default application that it will implement upon timeout 
of its period of waiting to receive a reply message from 
a trigger, it is highly desirable to have a mediated SCP 
implement a default application so that customers of the 
blocked service provider do not all experience the de- 
lays inherent in a default application controlled solely by 
multiple timeouts. 

Therefore, when access of a particular service pro- 
vider is blocked, as described hereinabove, a record of 
the blocked service provider is maintained in the medi- 
ated SCP. Further message traffic directed to the 
blocked service provider will cause a response, consist- 
ent with a default application, to be provided back over 
the nenvork, usually to a service switching point. 

In most instances, the default application will simply 
be the provision of what is commonly known in the tel- 
ephone industry as Plain Old Telephone Service 
(POTS). However, certain messages from a customer 
of the blocked service provider may generate a reorder 
tone, or even a cut over to an announcement that in- 
forms the customer of the unavailability of the service 
from this particular service provider. For example, if a 
customer of the blocked service provider was a sub- 
scriber to a service of call forwarding, and it executed 
the dialing sequence to cause forwarding of his or her 
phone, this message can be detected by the mediated 
SCP that can then provide the customer with some au- 
dible indication that this particular service is temporarily 
unavailable. In addition to a somewhat rudimentary de- 
fault application, it is possible that the operator of the 
AIN can provide a selection of default applications that 
could be invoked by the service provider in the event of 
an equipment failure or blocking of the port 

According to another implementation of the present 
invention, an interpreter language is defined for gener- 
ating AIN messages from service control points or serv- 
ice nodes. In these embodiments, the interface to the 
AIN is the interface across which a service provider's 
interpreter language program statements are passed to 
the interpreter program. The interpreter program does 
all parameter checking and can easily force all messag- 
es generated as output to contain proper sender identi- 
fiers. 

Brief Description of the Drawing 

Figure 1 is a block diagram of the existing Advanced 
Intelligent Network in a telephone system in the United 

States. 

Figure 2 is a block diagram of the apparatus that 
implements a first preferred embodiment of the present 
invention. 
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Figure 3 is a block diagram of the apparatus that 
implements a second preferred embodiment of the 
present invention. 

Figure 4 is a block diagram of the logical and phys- 
ical structure of a third preferred embodiment of the 
present invention. 

Figure 5 is a block diagram of the logical and phys- 
ical structure of a fourth preferred embodiment of the 
present invention. 

Figure 6 is a flow chart showing the step of the pre- 
ferred method implemented in the mediated access 
service control point in the embodiment of Figure 2. 

Figure 7 is a flow chart of the steps of the preferred 
method implemented at the switching transfer point in 
the embodiment of Figure 2. 

Figure 8 is a flow chart showing the steps of the pre- 
ferred method implemented at the service switching 
point in the embodiment illustrated in Figure 3. 

Figure 9 is a flow chart showing the steps of the pre- 
ferred method implemented at the mediated service 
control point in the embodiment of Figure 3. 

Detailed Description of the Preferred Embodiment 

Turning now to the drawing figures in which like 
numbers reference like parts or steps, several alternate 
embodiments of the present invention will now be de- 
scribed. The existing Advanced Intelligent Network in a 
typical switched telephone system is shown in Figure 1 
and has been described in detail in the Background of 
the Invention section of this specification. The present 
invention contemplates, but is not limited to, four inter- 
faces for providing access to the AIN. The first is an SS7 
link into signal transfer point 20 to which a service pro- 
vider service control point is attached. The second is to 
make ISDN link 41 the interface and have the service 
provider, either local exchange carrier or third party, con- 
trol and operate a service node such as service node 
39. The third location of the interface is an interpreter 
between an interpretive program language and the serv- 
ice execution logic within the existing computers in serv- 
ice control point 26. The fourth is a similar arrangement 
in the computer controlling service node 39. 

The balance of this specification describes in detail 
two alternate embodiments of the present invention de- 
signed, respectively, for the first two interface points de- 
scribed above. The same logical functions are to be ad- 
dressed in embodiments of the interpreters for the latter 
two interface points. Application of the steps and princi- 
ples described in the first two embodiments to imple- 
mentations of the other two embodiments will be appar- 
ent to those skilled in the art. 

Figure 2 shows a block diagram of the physical de- 
vices used in the first preferred embodiment of the 
present invention. Exemplary service switching point 
(SSP) central office switches 1 5-1 5' are illustrated ther- 
eon, being interconnected by trunks 19b. Each of the 
SSP logical nodes at these switches are connected by 



SS7 data links 21a and 24b, respectively, to a signal 
transfer point 20'. As used herein, numerals referenced 
with a prime indication are used to refer to devices that 
are very similar to their previously introduced counter- 
5 parts, but which have some additional functionality add- 
ed for the purpose of being used to implement the 
present invention. In the first preferred embodiment, 
certain gateway screening functions, described herein- 
above in connection with Figure 7, have been added to 
signal transfer point 20' to implement the present inven- 
tion. 

SS7 link 27 links STP 20' with the local exchange 
carrier operated mediated access service control point 
26'. This device is physically the same as SCP 26 shown 
in Figure 1. Its computer includes program instructions 
for executing certain steps of the preferred embodiment 
described hereinbelow in connection with Figure 6 and 
the data bases contained in those computers, repre- 
sented by block 45, contain both customer records as 
in the prior art and service provider records needed for 
effecting the present invention. 

Another SS7 link 46 connects signal transfer point 
20' to a service provider service control point 47. Gen- 
erally, service provider SCP 47 may be operated by any 
entity that provides any form of a switched telephone 
service, although it will often represent an SCP operated 
by a party other than the local exchange carrier whose 
network is depicted in Figure 1 . For the embodiment of 
Figure 2, the interface between the service provider 
SCP 47 and the existing Advanced Intelligent Network 
is a point along SS7 data link 46, which is referenced as 
48 in the drawing of Figure 2. 

The embodiment of Figure 2 executes the steps il- 
lustrated in Figures 6 and 7 described hereinbelow. The 
flow of data packets containing AIN network messages 
will be described in connection with Figure 2 and the 
steps in the mediation process may be described in de- 
tail in connection with Figures 6 and 7. Mediation in the 
embodiment of Figure 2 takes place at both the gateway 
screening functions of signal transfer point 20' and in 
the mediated access SCP 26\ 

Generally speaking, most all packets between cen- 
tral offices 15-15' and service provider SCP 47 are first 
passed to, and then back from, mediated access SCP 
26'. An example will help illustrate this. 

Consider the example of a customer whose sub- 
scriber line is connected to SSP switch 1 5, and in which 
the customer goes off hook. SSP switch 15 generates 
a trigger in response thereto. The trigger is an AIN pack- 
et that contains a message indicating that this particular 
directory number has gone off hook. This packet is 
passed over SS7 data line 21a to STP 20'. The STP 
routes this packet over data link 27 to mediated access 
SCP 26' where it is examined with respect to information 
contained in a customer data base within data bases 45. 
When the trigger message is received by mediated ac- 
cess SCP 26\ it checks in its data bases 45 and deter- 
mines that particular triggers for this particular directory 
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number should be passed on to sen/ice provider SCP 
47 since there is an entry in the data base record for that 
directory number indicating that the subscriber who us- 
es same is a customer of the service provider that op- 
erates SCP 47. It therefore prepares a packet corre- 
sponding to the trigger that is sent out over link 27 to 
STP 20', which will forward same on to service provider 
SCP 47. Some of the mediation steps described here- 
inabove take place and then the packet is repackaged 
by mediated access SCP 26* with a destination address 
corresponding to service provider SCP 47 and transmit- 
ted back out over SS7 data link 27. The signal transfer 
point 20' accepts this packet and passes it over SS7 da- 
ta link 46 to the service provider SCP 47. 

In response thereto, SCP 47 generates a packet ad- 
dressed to SSP switch 15 indicating the appropriate 
next action to be taken, which in most cases will simply 
be for the switch to continue with normal call processing 
that will cause the switch to provide dial tone to the cus- 
tomer. When this inbound packet arrives at STP 20* over 
data link 46, the STP checks a sender identifier field in 
the inbound packet that should identify the service pro- 
vider that operates SCP 47. STP 20 then checks an in- 
ternally stored port identifier that corresponds to the 
service provider whose SCP 47 is connected to inter- 
face 48. These two values are then compared and, if 
they do not match, the inbound packet is rejected since 
it, on its face, contains a false indication of the source 
of the network message. 

Assuming that this does not occur and the packet 
is passed by STP 20', the inbound response of the pack- 
et is passed over SS7 link 27 to LEC mediated access 
SCP 26' at which the mediation steps illustrated in Fig- 
ure 6 take place. If all is well, the packet message, with 
a destination address for SSP switch 1 5, is passed back 
over SS7 link 27 to STP 20' which in turn routes it over 
link 21a to switch 15. 

As is described in greater detail in connection with 
Figs. 6 and 7, conditions may arise in which STP 20' is 
instructed to terminate its receipt of inbound messages 
across interface 48. It is also possible that an equipment 
failure will occur within SCP 47 that will cause it to stop 
generating appropriate responsive message packets. 
Under either of these circumstances, it should be under- 
stood that mediated access SCP 26' is programmed to 
provide default applications in the absence of the net- 
work's ability to effectively communicate with service 
provider SCP 47. There is a wide range of choices of 
the default applications that will be apparent to those 
skilled in the art. However, the most common one will 
simply be provision of plain old telephone service 
(POTS). The provision of default applications that will 
continue to respond with appropriate instructions to 
messages from switches 15-15* significantly reduces 
the extent to which the Advanced Intelligent Network is 
made vulnerable to equipment failures or abuse on the 
service provider side of interface 48. In the absence of 
such default application, the SSP switches 15-15' would 



be made completely dependent on their internal default 
applications and they would only be stepped through 
these applications in response to timeouts of internal 
timers operated within the SSP These timers limit the 
5 amount of time an SSP will wait for a reply to a previously 
transmitted outgoing message. 

Figure 3 shows a second embodiment of the 
present invention that allows service providers to pro- 
vide a plurality ot enhanced services from a service pro- 
vider service node 39'. One aspect of this embodiment 
is that it allows functions that are conventionally control- 
led by service control points to be provided through a 
service node, as well as provision of in-band voice and 
data services that are conventionally provided by serv- 
ice nodes. In other words, a service node can interact 
with any switch connected to the SS7 network (as can 
an SCP), as well as directly originate and terminate 
communication connections. The ISDN links 41 consti- 
tute the interface between the Advanced Intelligent Net- 
work and the service provider source of packets in the 
embodiment of Figure 3. A service switching point 49 is 
provided at a central office switch connected to SSP 
switch 15' by another plurality of trunks 19c. SSP 49 in- 
cludes a portion of the mediation logic which is similar 
to that of gateway screening, as indicated at 50 in Figure 
3. An SS7 link 21 d connects SSP 49 to STP 20. 

A significant advantage to non-LEC service provid- 
ers is made possible by the structure of the embodiment 
of Figure 3. It should be understood that service node 
39' may be embodied by relatively small computing de- 
vices connected to SSP 49 via an ISDN basic rate in- 
terface. As is well known to those in the art of telephony, 
subscription costs for an ISDN basic rate interface are 
currently about $100 per month whereas an SS7 circuit 
to a service provider service control point, such as that 
employed in the embodiment of Figure 2, costs several 
thousand dollars a month under typical current tariffs. 
Thus, the embodiment of Figure 3 makes it possible for 
relatively small or low volume service providers to pro- 
vide enhanced telephone service through the Advanced 
Intelligent Network. 

In the embodiment of Figure 3, the mediation func- 
tions and gateway screening logic 50 are illustrated on 
Figure 8. In the preferred form of this architecture for the 
present invention, the screening is preferably done on 
messages in the ISDN format and, if they are appropri- 
ate for passing on to STP 20, they are converted to SS7 
format using existing conversion routines currently used 
in connection with the generation of AIN packets from 
service nodes. The balance of the mediation functions 
are performed in mediated access SCP 26*. It should be 
understood that this SCP is identical to SCP 26' shown 
in Figure 2 except that it performs a somewhat different 
set of mediation tasks, as described he rein be low in con- 
nection with Figure 9. 

In a manner analogous to the flow of packets de- 
scribed in connection with Figure 2, packets from a 
switch, such as triggers, are routed through STP 20 to 



15 



20 



25 



30 



35 



40 



45 



50 



11 

NSDCCID: <EP 070674381 _l_> 



21 

mediated access SCP 26'. Upon the SCP's detection of 
a trigger from a customer employing service node 39', 
an appropriately addressed packet indicative of the trig- 
ger is sent back over link 27 through STP 20, SS7 link 
21d, and on to SSP 49. There it is converted from an 
SS7 packet to an ISDN packet containing equivalent in- 
formation, and passed across interface 41 to service 
node 39*. The service node, upon generating an appro- 
priate response in the form of an ISDN message, passes 
a responsive message back to the screening logic 50 
where it is screened and converted back to SS7 format 
for retransmission over link 21 d. From this link, it goes 
to STP 20 that routes it to mediated access SCP 26', 
which then performs its mediation tests for inbound 
packets. On the assumption that the inbound packet re- 
ceived from service node 39' meets all the criteria of the 
mediation tasks, the commands embodied in the in- 
bound packet are reformulated into a packet that is ad- 
dressed to the appropriate SSP central office, and it is 
then placed back on the network via SS7 link 27. 

Turning next to Figure 4, one of interpretive lan- 
guage embodiments of the present invention is illustrat- 
ed. A service provider interface 51 is provided over a 
serial data link 52 to existing service management sys- 
tem 37. Service provider interface may be nothing more 
than a dial-in modem through which a service provider 
that has contracted with the local exchange carrier may 
load an application program via service management 
system 37 into service control point 26". 

It should be noted that there are only slight modifi- 
cations in the software running on LEC service control 
point 26" as compared to SCP 26 illustrated in Figure 1 . 
Other than this, and the provision of an interface 51 , the 
devices shown in Figure 4 are identical to those existing 
in the AIN today. Thus, Figure 4 represents a compact 
implementation of the present invention that requires lit- 
tle modification to the physical and logical structure of 
the existing Advanced Intelligent Network. 

Within SCP 26", block 55 is labeled service logic 
execution. This represents application support services 
and an operating system for the computers embodying 
AIN SCPs. In the embodiment of Figure 4, interpreters 
56a and 56b are interpreter programs for running appli- 
cations written in interpretive language. Two such appli- 
cations, LEC application 57 and third party application 
58 are illustrated in Figure 4. A dashed extension 35' of 
data link 35 indicates that applications 57 and 58 may 
be downloaded via data link 35 from the service man- 
agement system 37. In the embodiment of Figure 4, in- 
terfaces 59a and 59b are the mediated interfaces be- 
tween the service provider's source of AIN message 
packets and the Advanced Intelligent Network. Media- 
tion is accomplished by interpreters 56a and 56b. The 
output from interpreter programs 56 comprises calls to 
a run time system of service logic execution 55, said 
calls being made over respective logical links 61a and 
61b. 

Interpreters 56a and 56b are very similar, but in 
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most applications should not be identical. In particular, 
certain exclusions from the set of legal network messag- 
es that are controlled by interpreter 56b are exclusive to 
non-local exchange carrier service providers. The most 

5 immediately apparent one of these are network mes- 
sages that affect local exchange carrier billing records 
for particular customers. 

Figure 5 shows an embodiment that is analogous 
to that of Figure 4. In the embodiment of Figure 5, the 

10 interpreter applications reside in service node 39 and 
are executed by the computer embodying same. The 
elements shown in Figure 5 are identified with prime 
designations of the corresponding elements shown in 
Figure 4. In the embodiment of Figure 5, the applications 

15 57' and 58' may be, and normally are, downloaded via 
data link 40 from service management system 37. Serv- 
ice logic execution run time system 55' is different from 
that of the corresponding element 55 in the embodiment 
of Figure 4 in that it must generate output in the form of 

20 packets for an ISDN link, and these packets must be 
generated in recognition of their entry point into the net- 
work via service switching point 1 5' rather than a service 
control point. 

As noted hereinabove, once one skilled in the art 

2S understands the mediation functions implemented by 
the embodiments of Figures 2 and 3, writing appropriate 
analogous instructions for interpreters 56b and 56b' for 
the embodiments of Figures 4 and 5, respectively, will 
be understood. 

30 Turning next to Figures 6 and 7, the details of the 
mediatbn steps of the first preferred embodiment of the 
present invention, the hardware of which is illustrated in 
Figure 2, is shown. In the flow charts of Figures 6-9, exit 
nodes designated by a capital letter are logically identi- 

35 cal to corresponding entry nodes labeled with the same 
letter. Same have been used in order to avoid flow line 
crossings or large loops around the diagrams of these 
charts. Figure 6 shows the mediation functions per- 
formed by the LEC mediated access service control 

40 point 26' of Figure 2. When a packet is received over 
link 27 and stored in appropriate buffers, the code for 
performing the mediation steps is entered at point A, as 
indicated by reference numeral 110. First, the check 
sums are calculated at decisional step 111. This process 

45 is conventional in nature and uses check bits included 
in the packet to detect transmission errors. If the check 
sums are invalid, NO branch 1 1 2 is taken from this step 
to routine 115 at which the message is rejected and a 
request for retransmission of the message is ultimately 

50 generated over the network. Once this is accomplished, 
the mediation process is exited at node 116. 

If the check sums are valid, YES branch 1 1 7 is taken 
to routine 11 8 at which appropriate fields of the packet 
are checked for a sender identifier. The sender identifier 

55 is a code that identifies the entity that created the mes- 
sage. At routine 119, current counts associated with the 
sender identified in routine 118 are incremented and ap- 
propriate timer values are stored These counts are 
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maintained for several purposes. One is to maintain the 
count of query/response pairs generated by a particular 
sender in order to effect billing of the third party service 
providers for the use of the Advanced Intelligent Net- 
work. Additionally, an inbound message rate at which s 
packet messages are provided across interface 48 from 
the service provider operating SCP 47 is calculated. 
This incoming message rate is an average over a rela- 
tively short period o1 time. Additionally, a longer period 
average is maintained so that an alarm condition of ex- io 
cess message traffic can be detected. In the preferred 
embodiment, only the short period inbound message 
rate exceeding a predetermined value will cause inter- 
face 48 to be blocked. 

At step 1 20 the calculated inbound message rate is is 
compared to an authorized message rate number tor the 
particular service provider, which number is stored in a 
service provider record in data bases 45 within mediated 
access SC^ 26* In the main, there are three possible 
paths Uvil may be taken as a result of the relationship 20 
between H ie inbound message rate and the authorized 
message rnte number. If the inbound message rate is 
excessive by the criteria established, YES branch 121 
ig taken to fojtme 122 at which a message notifying 
service orovidor SCP 47 is transmitted back across in- 25 
tort^co 48 by r>o modiated access SCR This allows the 
service provider SCP to take any appropriate action that 
it ts oipnbie ot ta*mg when the rate at which it is trans- 
mitt r q mos^ins across interface 48 is greater than it 
h^is nrs*-*itoci *iit no used 30 

f torn r-cfo the loutine proceeds to decisional step 
125 ri! wn<n nc extent lo which the inbound message 
rate CKceeds the authorized message rate is checked, 
it tlx noounc message rate exceeds the authorized 
message r,*tc njmocr by at least a predetermined 35 
amount such mat the ability of the network to provide 
rtdeqLutc «nd hmcry service to other service providers 
wtf] fcc mp^ed the mediation process will terminate 
mcsviQo travel across the physical port and block inter- 
face 4c If :r>ts option is required, YES branch 126 will 
be ViKcn irom slop 125 It. on the other hand, the in- 
bound message 'ate is too high, but not so excessive 
as tc seriously cctcno^ate network performance, NO 
branch 127 will bo taken Irom step 125. 

Cor sidcr first the circumstances in which the in- 
bound message rate exceeds the authorized message 
rale number b/ a: least the above referenced predeter- 
f nine J nrnouiv. The mediation logic advances to step 
125 at which n lurnriation message is sent to STP 20\ 
This instructs the STP to terminate inbound traffic 
across interface 48 and thus : block the physical port rep- 
resented thereby Next step 129 is reached at which the 
SCP notifies tnc service management system 37 (Fig. 
1 ) ol the termination of access at the port 48 of SS7 data 
link 46. This gives personnel at the service management 
system an opportunity to contact the service provider 
whose access is being cut off to see if corrective action 
can be taken Additionally, it will notify the service man- 



agement system of the termination in anticipation of 
possible complaints from customers of this particular 
service provider. 

The routine represented by step 1 30 is activation of 
a default application that has been described herein- 
above in connection with Figure 2. From the previous 
description of the pattern of passing packet messages 
back and forth in the embodiment of Figure 2, it will be 
appreciated that part of the default application is to ter- 
minate the process of sending packets from SCP 26' to 
SS7 data link 46 in response to packets originated within 
one of central offices 1 5. Therefore, rather than perform- 
ing the normal mediation functions and then passing the 
packet on to service provider SCP 47, the mediated 
SCP 26' must make a decision as to what response the 
default application will give to the received packet that 
would normally be sent to service provider SCP 47. It 
should thus be understood that once this state is en- 
tered, the particular packets transmitted outbound by 
mediated access SCP 26* in response to packets ulti- 
mately intended for service provider SCP 47 will be 
modified in accordance with the default application run- 
ning on SCP 26', and that this condition will prevail until 
the blocking of the interface 48 is cleared. Therefore, it 
should be understood that part of the tests employed at 
step 120 is to determine whether interface 48 has al- 
ready been blocked. If that is the case, it would be 
wasteful to continue to issue termination instructions. 

Once the default application has been activated, the 
mediation logic is exited at node 1 31 until the next pack- 
et is received. 

Next, the situation in which NO branch 127 is taken 
from step 125 should be considered. First, decisional 
step 1 32 is executed at which criteria for rejecting the 
message are examined. The criteria include the extent 
to which the inbound message rate exceeds the author- 
ized message rate number, and the nature of the mes- 
sage itself. With respect to the latter consideration, the 
message may be one that, if simply rejected and not 
sent to its addressed destination, could leave a custom- 
er's phone locked in a state in which it cannot provide 
service. There are other criteria upon which the decision 
at step 132 can be based. On the assumption that the 
message is not rejected, NO branch 1 35 is taken that 
returns the logic to the main flow of mediation steps. 

If the message is to be rejected, YES branch 136 is 
taken from step 132 that leads to routine 137. At this 
step, a rejection message is transmitted to the sender, 
in the example under consideration, service provider 
SCP 47. Since the rejection of the message may have 
an adverse impact on operation of another network el- 
ement, particularly an SSP at a central office switch, a 
determination is made at step 1 38 as to whether an error 
message should be generated as a result of having re- 
jected the message from the service provider. If this is 
deemed appropriate, YES branch 1 39 is taken to step 
140 at which an error message is sent to the switching 
service point that sent an original message to which 
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SCP 47 was attempting to respond. From here, the me- 
diation process is exited at node 141 . Naturally, if no er- 
ror message is required, NO branch 142 is taken from 
step 1 38 that leads directly to exit node 141. 

The discussion of the steps between branch 121 
and node 141 have been based on the assumption that 
the mediation logic detected an excessive inbound mes- 
sage rate at step 120. The circumstance in which no 
such excessive message rate is detected should now 
be considered. When this occurs, NO branch 1 45 is tak- 
en from step 1 20 to another decisional step 1 46 at which 
the message parameters are tested to determine if they 
are within predetermined valid ranges for AIN messag- 
es. If any are out of range, and NO branch 147 is taken 
to step 148 at which an error message is transmitted to 
the sender indicting that an out of range parameter was 
detected. This could be from a logical error that occurred 
at service provider SCP 47, or an error event that 
changed too many bits to be detected by the check 
sums, and which caused the bits of a message param- 
eter to be changed to take the parameter out of range. 
Once the error message has been sent to the sender of 
the packet, control moves to a node 149 labeled B, 
which logically connects to input node 149' that leads 
control to step 1 38. Note than an error message is pro- 
vided to the sender at step 148. Flow then goes to step 
1 38 at which a decision is made as to whether an error 
message to the SSP is needed and appropriate action 
is taken as described hereinabove. 

If all of the message parameters are in range YES 
branch 150 is taken from step 146 and the sender/cus- 
tomer pair is checked at step 1 51 . At step 1 51 the packet 
is checked for its substantive message content to deter- 
mine if it includes a message to alter call processing for 
an affected customer directory number. If this is the 
case : an affected customer identifier from the packet is 
detected and used to access a customer record in data 
bases 45. Within this record is an indication of the serv- 
ice providers for whom this LEC customer is also a cus- 
tomer of the service provider In other words, the data 
base contains an indication that this particular customer 
has authorized the particular service provider to alter the 
call progress of a telephone call made on the customer's 
directory number. If the customer record indicates that 
there is a relationship between the customer identified 
by the affected customer identifier and the service pro- 
vider who is the sender of the message, then YES 
branch 1 55 is taken. If there is no sender/customer pair 
in data bases 45, NO branch 156 is taken. This leads to 
node 1 60 that, in turn, takes the logical flow to step 1 37 
at which a rejection message is sent to the sender. The 
routine of checking for whether an SSP error message 
is needed is again followed and the mediation process 
is exited at 1 41 . 

If an appropriate sender/customer pair is detected 
in the customer record of the data base, YES branch 
1 55 is taken to decisional step 1 57 where the sender 
identifier is compared to the logical entity that is desig- 
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nated as the recipient in the message. At step 157, the 
definition of the recipient should be considered to in- 
clude both the network element to which the message 
is addressed combined with certain aspects of the sub- 
5 stantive command of the message. In other words, it 
may be appropriate for this particular sender to commu- 
nicate with certain network elements to perform some 
functions, but not all of the possible repertoire of func- 
tions for which that element will accept a command. For 
io example, it may be acceptable for a service provider to 
communicate with billing records contained with the AIN 
to increment a value for fees for services provided by 
this particular service provider. However, it may not be 
acceptable for the same service provider to affect the 
is customer's records with respect to LEC billing. 

If the sender/recipient pair is invalid, NO branch 158 
is taken, which once again leads to step 1 37 and its sub- 
sequent steps for sending a rejection message and de- 
termining whether an error message needs to be sent 
20 to an SSP. 

If the sender/recipient pair is legal, YES branch 159 
is taken to step 161 at which a feature interaction table 
is checked. In this routine, certain activated features, 
which may interact with a feature being implemented by 
25 the message that is under scrutiny, are checked to de- 
termine if an undesirable feature interaction, such as a 
trigger loop, may be presented. The routines for check- 
ing feature interactions are relatively complex, but fea- 
ture interaction detection algorithms exist in the art. 
30 Once this routine has been performed, the results of the 
analysis are tested at step 162 to determine if an illegal 
interaction was detected. If it is determined that an illegal 
or dangerous interaction is present, YES branch 165 is 
taken that also leads to node 160 and step 137. If no 
35 illegal interaction is detected, NO branch 166 is taken 
to step 1 67 at which the message is forwarded to its re- 
cipient. After this, branch 168 takes the mediation proc- 
ess to exit node 141 and the SCP 26' prepares to receive 
the next packet. 
40 Figure 7 shows the mediation functions performed 
at the signal transfer point 20' in the embodiment of Fig- 
ure 2. When a packet is received by STP 20' across in- 
terface 48 ; the mediation process is entered at node C, 
which bears reference number 169. While not specifi- 
cs cally shown, the sender is identified in the same manner 
as it is with respect to step 118 shown in Figure 6. At 
step 1 70 the sender identifier contained within the mes- 
sage is compared to a port identifier stored within STP 
20' that designates an authorized provider of packets to 
50 interface 48. In other words, it stores a record of the as- 
sociation of the physical port of interface 48 with the par- 
ticular service provider that is authorized to operate an 
SCP on SS7 data link 46. If these do not match, it is 
inappropriate for the gateway screening to allow a pack- 
55 et into the network that represents itself to have been 
originated from one entity, yet should not have been 
generated by that entity because of the port through 
which it is trying to enter the AIN. Therefore, NO branch 
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171 is taken to step 1 72 at which the message is reject- 
ed. A rejection message is transmitted to the sender at 
step 175 and the routine is then exited at exit node 176. 

It the sender and port match, YES branch 177 is 
taken from step 170 to decisional step 1 78 at which the $ 
destination address is tested against the identity ot the 
sender. If the destination address is for a network ele- 
ment with which the service provider SCP 47 is not al- 
lowed to communicate, NO branch 179 is taken to re- 
jection step 172. The system behaves in the same man- 
ner as it did when branch 171 was taken from this point. 
If the destination address is acceptable, YES branch 
180 is taken from step 178. A check for any alternate 
routing necessary is made at step 181 . This is simply a 
process for determining whether certain switching 
nodes within the network are down and alternate ad- 
dress routing needs to be employed. Upon completion 
of this task, the message is forwarded to the recipient 
at step 182 and mediation is exited at node 176. 

The division of mediation tasks for the embodiment 
of Figure 3 is different than the embodiment of Figure 2, 
although the overall resulting functionality is the same. 
Since the functions involved are quite similar, the detail 
for each step that was recited in connection with Figs. 
6 and 7 will not necessarily be repeated for similar steps 
in Figs. 8 and 9. Figure 8 is a flow control diagram of the 
mediation steps performed by screening logic 50 of 
service switching point 49 shown in Figure 3. It should 
be remembered that packets travel across interface 41 
in a known format for ISDN packets. Upon receipt of a 
packet, the mediation logic is entered at node D 1 85. 
First, appropriate check sum tests are made at step 1 86. 
These are made in accordance with the rules in use for 
the ISDN protocol that is employed across interface 41 . 
If the check sums indicate an error, branch 187 is taken 
to routine 1 88 at which an error message is sent to serv- 
ice node 39'. As noted on Fig. 8, this is also communi- 
cating in accordance with the ISDN protocol in use. 
From here, the need for an error message to an SSP is 
determined at step 189 and, if needed, such a message 
is sent at step 1 90. The logic of this sequence of steps 
is the same as that associated with steps 138 and 140 
shown in Figure 6. The mediation logic is then exited at 
node 191. 

If the check sums are acceptable, branch 1 92 is tak- 
en from step 1 86 and the sender is identified at step 1 95 
in a manner analogous to the performance of step 118 
shown in Figure 6. The match between the sender and 
the particular ISDN port from interface 41 upon which 
the packet was received is tested at step 196. If they do 
not match, NO branch 197 is taken to routine 198 at 
which the absence of a match is noted, logged, and a 
message sent to the service management system indi- 
cating that a packet was received showing an incorrect 
or inappropriate sender. Since it is considered more like- 
ly that a service node may be operated by a third party 
service provider who in turn allows other service party 
providers to operate on such a node, it is believed pref- 



erable to provide for termination of message transport 
across the particular ISDN port if a message with an in- 
correct sender identifier is received. This decision is 
made at step 1 99. If the port is not to be terminated, NO 
branch 210 is taken that leads back to step 188. If the 
transport of messages inbound from this port is to be 
terminated, YES branch 211 is taken that leads to rou- 
tine 21 2 at which the screening logic 50 terminates mes- 
sage flow across the particular ISDN port 41 upon which 
the message containing the sender/port mismatch was 
received. It should be noted that this step may physically 
disconnect an ISDN link, or terminate use of a logical 
link such as the output of a multiplexer that corresponds 
to one basic rate or primary rate interface. 

At step 21 5, service management system is notified 
of the termination and a default application is activated 
at step 216. The default application may be implement- 
ed in SSP 49. However, the default application will nor- 
mally be activated by sending a message to mediated 
access SCP 26' indicating that the default application 
for this particular service provider should be employed. 
The mediated access SCP 26' will control the default 
application and send appropriate messages back to 
SSP switches in response to messages that, prior to ter- 
mination of the port, would have been directed to service 
node 39' for response. 

Returning now to the test of whether the sender 
matches the physical port at 1 96, assume the match is 
favorable and YES branch 217 is taken. This leads to 
step 218 that increments message counts and calcu- 
lates the input message rate as described hereinabove. 
Comparison of the input message rate to the authorized 
message rate number is achieved at step 219 in the 
same manner as that associated with step 1 20 in Figure 
6. If the rate is too high, YES branch 220 is taken to step 
221 at which the occurrence of the over rate condition 
is logged and the service management system is noti- 
fied. Next, the criteria for blocking the port are checked 
at step 222. If they are met, YES branch 225 is taken, 
which leads to step 212. Thus, the SSP responds in the 
same manner as it previously did if the decision to ter- 
minate the port is made at step 1 99. If the port is not to 
be terminated, NO branch 226 is taken and the media- 
tion process continues. 

At step 227 the sender/recipient combination is 
compared to a legal list. If it is unacceptable, NO branch 
228 is taken to node E at 229. This takes control to node 
E at 229' at which an error message is sent to the service 
node and the subsequent steps are executed. 

If the sender/recipient pair is legal, YES branch 230 
is taken and the mediation process is complete. A pack- 
et in signaling system 7 format is generated from the 
ISDN packet at step 231 and the SS7 packet is forward- 
ed to signal transfer point 20 at step 232, for subsequent 
transmission to its destination address. The mediation 
logic is then exited at step 235 and the process is com- 
plete. 

From review of Figure 8 it should be noted that one 



15 



20 



25 



30 



35 



40 



45 



50 



15 



1NSDOC1D: <EP 070674381 J_> 



29 



EP 0 706 743 B1 



30 



of the characteristics of the mediation that takes place 
within screening logic 50 is testing the validity of the 
message as a function of the port upon which it is re- 
ceived so that early detection of an illegal attempt to 
communicate with a particular recipient is possible. The 
more data intensive mediation functions (other than net- 
work usage issues) are performed at the mediated ac- 
cess service control point 26'. The mediation steps per- 
formed at the SCP in the embodiment of Figure 3 are 
illustrated in Figure 9. When a packet arrives at mediat- 
ed SCP 26', node F at 235 is the entry point. The check 
sums are tested at step 236 as described hereinabove. 
A negative result leads to branch 237 which takes flow 
to step 238 at which the message is rejected and the 
mediation process is exited at 239. Step 240 indicates 
that any password checking or decryption of a message 
is preferably perlormed at mediated access SCP 26'. 
Such is not required, but may be preferable due to the 
relative ease of access to ISDN links as compared to 
SS7 links 

Of ice again, the sender indicated by the sender 
identifier of the message is detected at step 241 and the 
rtppropriHtc message counts and the like are increment- 
ed and updated at step 242. At step 245, the calculated 
message rate is compared to the authorized message 
frito nunbof H acceptable, NO branch 246 is taken to 
stop 247 h\ which the message parameters are tested 
for bow>g within vniid ranges. If any parameter is out of 
rnnr^ NO br*nrh 248 is taken to routine 249 at which 
of tot mosvigo is transmitted to the sender and flow 
liHvcts to node G at 250 This takes the program to a 
node bearing the same label at 250', which leads to step 
25 1 at wn<f> the need for an error message is tested in 
tne s-rimo mannef as it was at step 1 38 in Figure 6. Sim- 
ilar >y A an error message is needed, it is generated at 
slop 252 and the mediation routine is exited at 255. 

V tne message parameters are in range, YES 
bf^ncn 256 ts taken to step 257 at which the sender/ 
customer pan is compared as previously described. If 
*n unfavorable rcsu« is obtained NO branch 258 is tak- 
en trvit loads to f out no 259 at which a rejection mes- 
sage is transmitted to the sender, i.e., service node 39'. 
The testing lor an er for message to the SSP is then per- 
lormed at step 251 anc the mediation program contin- 
ues to its exit h\ 2bi> it the customer data base indicates 
thrit the sonde f is authorized to affect calls of this cus- 
tomer YES branch 260 is taken from step 257 and the 
feviluie »itei action table is consulted al 261 . The test for 
an illegal interaction ib pei formed at step 262 and, if 
none is present Drench 265 is taken to routine 266 at 
which the message is forwarded to its recipient. Again, 
if an illegal interaction is detected at 262, YES branch 
267 is taken to sicp 259 at which the by now familiar 
sequence of roioction message and error message 
processing is performed. 

The only alternative not yet considered in this em- 
bodiment is if too many messages are detected. This is 
handled in the same manner as previously described by 



YES branch 270 being taken from step 245 to step 271 
at which the sender and the service management sys- 
tem are notified. The need to reject the message is test- 
ed at 271 . If it is to be rejected, YES branch 272 is taken 

s to step 259. If not, NO branch 275 takes the logic to 
branch 246 at which the mediation continues. 

From the foregoing description, it will be appreciat- 
ed that the various embodiments of the present inven- 
tion meet the objects stated above for protecting the op- 

io eration of the public switched telephone network con- 
trolled by the Advanced Intelligent Network when ac- 
cess to the AIN is opened to multiple service providers. 
It addresses the problems and potential problems de- 
scribed in the Background of the Invention. From the 

15 foregoing description of alternate embodiments of the 
present invention, other embodiments will suggest 
themselves to those skilled in the art. Therefore, the 
present invention should be limited only by the claims 
below. 

20 

Claims 

1. A method of mediating traffic in packet messages 
25 in an intelligent switched telephone network that in- 
cludes a plurality of digital data communications 
channels (21 , 27, 48) between a plurality of central 
offices (15) and at least one signal transfer point 
(20), a service control point (45') that is connected 

30 to said signal transfer point; including the steps of 
detecting a sender identifier in each in-bound pack- 
et from said interface, detecting an affected custom- 
er identifier in each said in-bound packet from said 
interface that includes a message to after call 
35 processing for an affected customer directory 
number; 

characterized by: 

said at least one service control point being a 
40 mediated service control point (26') including at 

least one data base (45) containing customer 
records; 

providing an interface (48) to a service provider 
service control point (47), said interface being 
45 connected to said signal transfer point (20'), 

reading a particular one of said customer 
records in said data base that contains data for 
a directory number corresponding to said af- 
fected customer identifier and determining 
50 (151 ) whether a sender corresponding to said 

sender indentifier is authorized to alter calls in- 
volving said directory number; and 
rejecting said in-bound packet (137) if said 
sender corresponding to said sender identifier 
55 is not authorized to alter calls involving said di- 

rectory number 

2. A method of mediating traffic in packet messages 
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as recited in Claim 1 further characterized: 

detecting (157) a destination address for each 
said in-bound packet from said interface; and 
rejecting each said in-bound packet (137) for s 
which said destination address is for a network 
element with which said service provider serv- 
ice control point is not allowed to communicate. 

A method of mediating traffic in packet messages io 
as recited in Claim 1 further characterized by: 

comparing (170) said sender identifier with a 
port identifier that designates an authorized 
provider of packets to said interface; 
rejecting each said in-bound packet (172) for 
which said sender identifier fails to correspond 
to port identifier; 

A method of mediating traffic in packet messages 20 
in an intelligent switched telephone network that in- 
cludes a plurality of digital data communications 
channels (21, 27, 48) between a plurality of central 
offices (15) and at least one signal transfer point 
(20), a service control point (45') that is connected 25 
to said signal transfer point characterized by: 

said at least one service control point being a 
mediated service control point (26') including at 
least one data base (45) containing service pro- 30 
vider records, said service provider records 
containing an authorized message rate number 
for at least a service provider associated with 
said service provider source of said packet 
messages; 35 
providing an interface (48) to a service provider 
source of said packet messages (47), said in- 
terface being connected to said signal transfer 
point (20 1 ), 

determining an inbound message rate (119, 40 
242) at which said packet messages are pro- 
vided across said interface from said service 
provider source of said packet messages; 
determining (120, 245) whether said inbound 
message rate exceeds said authorized mes- 45 
sage rate number by at least a predetermined 
amount; 

if said inbound message rate exceeds said au- 
thorized message rate number by at least said 
predetermined amount: 50 
blocking (1 28, 221 ) said packet messages from 
said service provider source of said packet 
messages, and 

causing said mediated service control point to 
subsequently send messages (130, 216) ef- ss 
f ecting a default application in response to net- 
work messages addressed to said service pro- 
vider source of said packet messages. 



5. A method of mediating traffic in packet messages 
as recited in Claim 4 further characterized by 

said message from said mediated service 
control point to said signal transfer point for causing 
said signal transfer point to block said packet mes- 
sages from said service provider service control 
point also causes said signal transfer point to sub- 
sequently redirect said network messages ad- 
dressed to said service provider service control 
point to said mediated service control point. 



Patentanspruche 

1. Verfahren zur (Nachrichten-)Verkehrsubermittlung 
in Form von Nachrichtenpaketen in einem intelli- 
gent geschalteten Telefonnetzwerk, das mehrere 
digitale Datenkommunikationskanale (21, 27, 48) 
zwischen mehreren Zentraleinheiten (15) und min- 
destens einem Signaltransferpunkt (20), und einen 
Service kontrollpunkt (45), welcher mit dem Signal- 
transferpunkt verbunden ist, miteinschlieBt; ein- 
schlieBlich der Schrrtte des Erfassens einer Absen- 
derkennung in jedem Paket von der Schnittsteile 
kommend, des Erfassens einer betroffenen Teil- 
nehmerkennung in jedem Paket von der Schnitt- 
steile kommend, das eine Nachricht zum Abandern 
der Anrufverarbeitung fur eine betroffene Teilneh- 
merverzeichnisnummer beinhaltet; 

dadurch gekennzeichnet, daB: 

der mindestens eine Servicekontrollpunkt ein 
Vermittlungs-(engL mediated) Servicekontroll- 
punkt (26') ist, der mindestens eine Datenbank, 
die Teilnehmeraufzeichnungen enthalt, ein- 
schlieBt; 

eine Schnittsteile (48) fur einen Seviceanbie- 
ter-Servicekontrollpunkt (47) bereitgestellt 
wird, und die Schnittsteile mit dem Signaltrans- 
ferpunkt (20*) verbunden ist, 
eine bestimmte Teilnehmeraufzeichnung in der 
Datenbank, die Daten fur eine Verzeichnisnum- 
mer entsprechend der betroffenen Teilnehmer- 
kennung gelesen wird, und ermittelt wird (151), 
ob ein Absender entsprechend der Absender- 
kennung ermachtigt ist, in Beziehung zur Ver- 
zeichnisnummer stehende Anrufe abzuandem; 
und 

das kommende Paket (137) zuruckgewiesen 
wird, wenn der Absender, der der Absender- 
kennung entspricht, nicht berechtigt ist, in Be- 
ziehung zur Verzeichnisnummer stehende An- 
rufe abzuandern. 

2, Verfahren zur (Nachrichten-)Verkehrsubermittlung 
in Form von Nachrichtenpaketen gemaB Anspruch 
.1 , zusatzlich gekennzeichnet durch: 
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Erfassen (157) einer Bestimmungsadresse fur 
jedes der von der Schnittstelle kommenden Pa- 
kete; und 

Zuruckweisung jedes kommenden Paketes 
(137), dessen Bestimmungsadresse fur ein 5 
Netzwerkelement bestimmt ist mit dem es dem 
Serviceanbieter-Servicekontrollpunkt nicht ge- 
stattet ist zu kommunizieren. 

3. Verfahren zur (Nachrichten-)Verkehrsubermittlung io 
in Form von Nachrichtenpaketen gemaB Anspruch 

1 , zusatzlich gekennzeichnet durch: 

Vergleich (170)der Absenderkennung mit einer 
AnschluBkennung, die einen autorisierten An- is 
bieter von Paketen an die Schnittstelle bezeich- 
net; 

Zuruckweisung jedes kommenden Pakets 
(172), fur das die Absenderkennung nicht zur 
AnschluBkennung gehort. 20 

4. Verfahren zur (Nachrichten-) Ver ken rsubermitt lung 
in Form von Nachrichtenpaketen in einem intelli- 
gent geschalteten Telefonnetzwerk, das mehrere 
digitale Datenkommunikationskanale (21, 27, 48) 25 
zwischen mehreren Zentraleinheiten (15) und min- 
destens einem Signaltransferpunkt (20), und einen 
Servicekontrollpunkt (45), welcher mit dem Signal- 
transferpunkt verbunden ist, miteinschlieBt, ge- 
kennzeichnet durch: so 

der mindestens eine Servicekontrollpunkt ist 
ein Vermittlungs- Servicekontrollpunkt (26'), 
der mindestens eine Datenbank (45) mit Ser- 
viceanbieteraufzeichnungen einschlieBt, wo- 35 
bei die Serviceanbieteraufzeichnungen eine 
GroBe bzw. Zahl fur eine zugelassene Nach- 
richtenrate fur zumindest einen Serviceanbie- 
ter enthalten, der mit der Serviceanbieterquelle 
der Nachrichtenpakete in Zusammenhang 40 
stent; 

Bereitstellung einer Schnittstelle (48) fur eine 
Serviceanbieterquelle der Nachrichtenpakete 
(47), wobei die Schnittstelle mit dem Signal- 
transferpunkt (20*) verbunden ist; 45 
Ermittelung einer Rate kommender Nachrich- 
ten (119, 242), mit welcher die Nachrichtenpa- 
kete von der Serviceanbieterquelle der Nach- 
richtenpakete uber die Schnittstelle geliefert 
werden; 50 
Ermittelung (120, 245), ob die Rate der kom- 
menden Nachrichten die GroBe der zugelasse- 
nen Nachrichten rate urn mindestens einen vor- 
bestimmten Betrag ubersteigt; 
wenn die Rate der kommenden Nachrichten s $ 
die GroBe der zugelassenen Nachrichtenrate 
um mindestens den vorbestimmten Betrag 
ubertrifft: 



Abblockung (128,-221) der Nachrichtenpakete 
von der Serviceanbieterquelle der Nachrich- 
tenpakete, und 

Veranlassung des Vermittlungs- Servicekon- 
trollpunkts zum nachfolgenden Senden von 
Nachrichten (130, 216), die eine Ersatzanwen- 
dungals Antwort aul Netzwerknachrichten, die 
an die Serviceanbieterquelle der Nachrichten- 
pakete gerichtet sind, bewirken. 

5. Verfahren zur (Nachrichten-)Verkehrsubermittlung 
in Form von Nachrichtenpaketen gemaB Anspruch 
4, zusatzlich dadurch gekennzeichnet, daB die 
Nachricht vom Vermittlungs -Servicekontrollpunkt 
zum Signaltransferpunkt, die den Signaltransfer- 
punkt zum Abblocken der Nachrichtenpakete vom 
Serviceanbieter-Servicekontrollpunkt veranlaBt, 
auch bewirkt, daB der Signaltransferpunkt die an 
den Serviceanbieter-Servicekontrollpunkt gerichte- 
te Netzwerknachrichten an den Vermittlungs-Ser- 
vicekontrollpunkt zurucksendet. 



Revendications 

1. Procede de mediation du trafic de messages par 
paquets, dans un reseau telephonique commute in- 
telligent qui comporte une pluralite de voies de com- 
munication de donnees numeriques (21 , 27, 48) en- 
tre une pluralite de centraux telephoniques (15) et 
au moins un point de transfert de signal (20), un 
point de controle de service (45 1 ) qui est raccorde 
audit point de transfert de signal; comportant les 
etapes de detection d'un code ^identification de 
I'expediteur dans chaque paquet d'arrivee a partir 
de ladite interface, la detection d'un code cfidentifi- 
cation du client attribue dans chaque dit paquet 
d'arrivee a partir de ladite interface qui comporte un 
message pour modifier le traitement de I'appel pour 
un numero d'appel de client attribu6 ; 
caracterise en ce que 

ledit au moins un point de controle de service 
est un point de controle de service servant d'in- 
termediaire (26') comportant au moins une ba- 
se de donnees (45) contenant les informations 
relatives au client ; 

la fourniture d'une interface (48) a un point de 
controle de service du fournisseur de services 
(47), ladite interface etant connectee audit 
point de transfert de signal (20'), 
la lecture d'une information particuliere parmi 
lesdites informations relatives au client conte- 
nues dans ladite base de donnees qui contient 
les donnees pour un nume>o d'appel corres- 
pondant audit code d' identification du client at- 
tribue et la determination (151)de I'autorisation 
ou de la non autorisatbn de I'expediteur cor- 
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respondant audit code d' identification de I'ex- 
pediteur de modifier tes appels impliquant (edit 
numero d'appel ; et 

le rejet dudit paquet d'arrivee (137) si ledit ex- 
pedites correspondant audit code d'identifica- 
tion de I'expediteur n'est pas autorise a modifier 
les appels impliquant ledit numero d'appel. 

2. Precede de mediation du trafic de messages par 
paquets selon la revendication 1, caracterise en 
outre par 

la detection (1 57) d'une adresse de destination 
pour chacun desdits paquets d'arrivee a partir 
de ladite interface ; et 

le rejet de chacun desdits paquets d'arrivee 
(137) pour lequel ladite adresse de destination 
est destinee a un element de reseau avec le- 
quel ledit point de contr6le de service fournis- 
seur de service n'est pas autorise a communi- 
ques 

3. Precede de mediation du trafic de messages par 
paquets selon la revendication 1, caracterise en 
outre par : 

la comparaison (1 70) dudit code d'identification 
de I'expediteur avec un code d'identification de 
port qui designe un fournisseur autorise de pa- 
quets a ladite interface ; 
le rejet de chacun desdits paquets d'arrivee 
(172) pour lequel ledit code d'identification de 
I'expediteur ne correspond pas au code d'iden- 
tificatbn de port. 

4. Precede de mediation du trafic de messages par 
paquets dans un reseau telephonique commute in- 
telligent qui comporte une pluralite de voies de com- 
munication de donnees numeriques (21 , 27, 48) en- 
tre une pluralite de centraux telephoniques (15) et 
au moins un point de transfer! de signal (20), un 
point de controle de service (45') qui est connecte 
audit point de transfert de signal, caracterise en ce 
que : 

ledit a u moins un point de controle de service 
est un point de controle de service servant d'in- 
termediaire (26*) comportant au moins une ba- 
se de donnees (45) contenant des informations 
relatives au fournisseur de services, lesdrtes in- 
formations relatives au fournisseur de services 
contenant un numero de debit de message 
autorise pour au moins un fournisseur de ser- 
vices assccie a ladite source du fournisseur de 
services desdits messages par paquets ; 
la fournrture d'une interface (48) a une source 
de fournisseur de services desdits messages 
par paquets (47), ladite interface etant connec- 



tee audit point de4ransfert de signal (20') : 
la determination d'un debit de messages d'ar- 
rivee (1 1 9, 242) auquel lesdits messages par 
paquets sont fournis sur ["ensemble de ladite 
5 interface a partir de ladite source du fournis- 

seur de services desdits messages par 
paquets ; 

la determination (1 20, 245) du depassement ou 
du non depassement dudit debit de messages 
10 d'arrivee par rapport audit debit de messages 

autorise d'au moins une quantite 
predeterminee ; 

si ledit debit de messages d'arrivee depasse le- 
dit debit de messages autorise d'au moins une 

15 quantite predeterminee ; 

le bloeage (1 28, 221 ) desdits messages par pa- 
quets a partir de ladite source de tournisseur 
de services desdits messages par paquets, et 
faire ensuite en sorte que ledit point de contrdle 

20 de service servant d'intermediaire envoie en- 

suite des messages (130 : 216) en effectuant 
une application par defaut en reponse aux mes- 
sages de reseau adresses a ladite source du 
fournisseur de services desdits messages par 

25 paquets. 

5. Precede de mediation de trafic de messages par 
paquets selon la revendication 4, caracterise en 
outre en ce que : 

30 ledit message allant dudit point de controle de 

service servant d'intermediaire audit point de trans- 
fert de signal pour faire en sorte que ledit point de 
transfert de signal bloque les messages par pa- 
quets provenant dudit point de controle de service 

35 du fournisseur de services fait egalement en sorte 
que ledit point de transfert de signal reoriente en- 
suite lesdits messages de reseaux adresses audit 
point de controle de service du fournisseur de ser- 
vices audit point de controle de service servant d'in- 

40 termediaire. 
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